justinludwig

10 ms·

61.
by justinludwig 4y ago
That's painful for this English speaker to read -- try "not every Scotsman" or "not all Scotsmen" instead.
62.
by justinludwig 4y ago
Looks like the URL for this post should be this instead: https://dheatattack.com/
63.
by justinludwig 4y ago
If it really is just a login page and some content, you can start out with an off-the-self CMS (like WordPress et al), with little to no development work. That would provide you with a quick way to test out your ideas. You might also want t
64.
by justinludwig 4y ago
Most startups are of course going to fail, but to give yourself the best chance for success, split the stock equally between cofounders (leaving ~20% for future employees); devote 100% of your time to the startup; and once you get funding,
65.
Zero Trust Architecture with WireGuard(procustodibus.com)
1 points by justinludwig 4y ago|0 comments
66.
LXD Containers for Wayland GUI Apps(blog.swwomm.com)
7 points by justinludwig 4y ago|0 comments
67.
Implementing a Zero Trust Architecture(nccoe.nist.gov)
230 points by justinludwig 4y ago|64 comments
68.
by justinludwig 4y ago
Sounds about fair, assuming they agree to put you on a decent salary once they have more money. They've already validated the idea, now they need help executing. It's not the same level of risk when you start out from square one a
69.
Observations on selected NIST post-quantum algorithms from Thomas Pornin(research.nccgroup.com)
1 points by justinludwig 4y ago|0 comments
70.
by justinludwig 4y ago
TLDR: everyone does know what imperative and declarative mean, but when it comes to Pulumi (an infrastructure-as-code development kit), nobody other than the author makes a distinction between Pulumi itself (declarative) and the code that u
71.
by justinludwig 4y ago
One of the nicest things about nftables is the way most distros has packaged it: with a service named "nftables" that runs a base config file from a standard location (usually /etc/nftables.conf or /etc/sysconf
72.
WireGuard Multi-Factor Authentication with Pro Custodibus(procustodibus.com)
1 points by justinludwig 4y ago|0 comments
73.
by justinludwig 4y ago
There's nothing special about .dev domains, other than they're automatically included on Chrome's HSTS preload list (so Chrome won't let you connect to a .dev website unless it has a valid HTTPS cert). If Bluehost says t
74.
by justinludwig 4y ago
I like the thinking behind this article, but it seems to me that the additional types the author brings up are all just specialized versions of the four primary documentation types: - Conceptual Overviews: High-level "explanations&quot
75.
by justinludwig 4y ago
> US government agencies are ordered to prioritize the entire process of transitioning to quantum-resistant cryptography and mitigating as much of the quantum risk as possible by 2035. > The CISA and NIST Directors are working on deve
76.
by justinludwig 4y ago
I can't say that I've ever been a fan of Atlassian or their products, but this blog post makes it sounds like they've at least learned the right lessons from this: 1. Establish universal "soft deletes" across all sy
77.
by justinludwig 5y ago
Here are three books you might find interesting: * The Pragmatic Programmer, by Dave Thomas & Andy Hunt * Scalability Rules, by Marty Abbott & Michael Fisher * Release It!, by Michael Nygard
78.
by justinludwig 5y ago
Going from 0 users to 1 user is the (first) hardest part of scaling a web app. Optimize your early architecture for speed of change, not for speed of serving web pages. You will need to make lots and lots of changes to get to 1 user, and th
79.
by justinludwig 5y ago
Here's a few you might like: https://www.procustodibus.com/blog/tag/cloud/
80.
by justinludwig 5y ago
I love my nite hood exactly for that reason: https://www.nitehood.com/
81.
Poor Man's BeyondCorp with WireGuard(procustodibus.com)
5 points by justinludwig 5y ago|0 comments
82.
by justinludwig 5y ago
TLDR: no special patterns, people just tend to see patterns even where there are none
83.
by justinludwig 5y ago
The original title, "The Road to OCIv2 Images: What's Wrong with Tar?", is a lot better IMHO. Otherwise, a great history lesson on the tar format, and why it's not a great fit for OCI images.
84.
by justinludwig 5y ago
Also adds defense-in-depth against stolen credentials -- it means an attacker can't just exfiltrate stolen SSH credentials to use sometime later from somewhere else on the Internet (or sell them / pass them along to a different sp
85.
by justinludwig 5y ago
If you have some time you can afford to invest, help out on a popular open-source project (one that you're interested in, and that has lots of open issues which need curating/investigating/fixing). This will help you: 1. Buil
86.
by justinludwig 5y ago
RE the alternative question: 2FA is _not_ an alternative to password managers -- it's like seat-belts and brakes on a car, you're going to want both. You need a password manager to keep track of the random password you've set
87.
Log4j vulnerability: what should boards be asking?(ncsc.gov.uk)
1 points by justinludwig 5y ago|0 comments
88.
by justinludwig 5y ago
If you're reasonably familiar with what web3 is supposed to be, you can skip the first two thirds of this essay, and jump straight to the "So what’s your fucking problem with Web3?" section (which contains a number of better
89.
by justinludwig 5y ago
This is a nice start at standardizing basic IoT device security; other highlights: - manufacturers must tell customers up front about the lifespan of security patches and updates - manufacturers must provide a public point of contact for vu
90.
by justinludwig 5y ago
Any one of these three might be what you were thinking of: * https://mvsp.dev/mvsp.en/index.html * https://www.goldfiglabs.com/guide/saas-cto-security-checklis... * https://latacora.mic

More ›